Data Protection Policy

Last updated: July 25, 2026

Quick-Think Solution is committed to protecting the privacy and personal data of our clients and users. This Data Protection Policy outlines how we collect, use, store, and protect personal data in accordance with Malawi's Data Protection Act (2024).

1. Legal Framework

We comply with the Malawi Data Protection Act (2024) and are regulated by the Malawi Communications Regulatory Authority (MACRA). This policy sets out our commitment to data protection principles including:

Lawfulness, fairness, and transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity and confidentiality (security)
Accountability

2. Data We Collect

We collect and process the following types of personal data:

Account Data: Name, email address, phone number, organization name, address
Usage Data: Information about how you use our Services, including IP address, browser type, pages visited
Payment Data: Mobile money numbers, bank details (processed securely through payment gateways)
Business Data: Information you input into our software (students, customers, inventory, etc.)

3. Purpose of Processing

We process personal data for the following purposes:

To provide and maintain our Services
To manage your account and subscription
To process payments and prevent fraud
To provide customer support
To improve our Services and develop new features
To comply with legal obligations
To protect the security of our Services and users

4. Data Security Measures

We implement the following security measures to protect your data:

Encryption: All data is encrypted in transit (TLS) and at rest
Access Controls: Role-based access with authentication and authorization
Regular Backups: Automated daily backups with 30-day retention
Secure Hosting: Data hosted on secure, compliant cloud infrastructure
Audit Logs: All access and changes are logged for accountability
Data Isolation: Multi-tenant architecture with strict data separation

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

For the duration of your subscription
For a period after subscription ends to allow for data recovery
As required by law or to resolve disputes
For audit and compliance purposes

When your subscription ends, we will retain your data for 90 days to allow you to reactivate your account. After this period, your data will be permanently deleted unless we are legally required to retain it.

6. Data Subject Rights

Under the Malawi Data Protection Act, you have the following rights regarding your personal data:

Right to Access: Request access to your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data (subject to legal requirements)
Right to Restriction: Request restriction of processing
Right to Data Portability: Request transfer of your data
Right to Object: Object to processing of your data

To exercise any of these rights, please contact us at info@quickthinks.com.

7. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities within 72 hours of becoming aware of the breach, in accordance with legal requirements.

8. International Data Transfers

Your data is primarily stored and processed in Malawi. However, some of our service providers may be located outside of Malawi. We ensure that all international data transfers comply with applicable laws and that appropriate safeguards are in place.

9. Children's Data

Our Services are not intended for use by children under the age of 18 without parental consent. We take extra precautions to protect the data of children who may use our educational software (School Management System).

10. Contact Us

If you have any questions about this Data Protection Policy or our data practices, please contact our Data Protection Officer:

Quick-Think Solution - Data Protection Officer
Mpemba, 311111, Blantyre, Malawi
+265 884 121 353
dpo@quickthinks.com